Dustin C. Hatch
ddd137a2e9
Since *frigate.service* runs as root, the directories created by `StateDirectory` are owned by root. The processes inside the container, therefore, cannot access them. Thus, we have to use `systemd-tmpfiles` to create the state directories with the appropriate permissions.
31 lines
712 B
Plaintext
31 lines
712 B
Plaintext
[Unit]
|
|
Description=Frigate NVR
|
|
Wants=network-online.target
|
|
After=network-online.target
|
|
Requires=dev-apex_0.device
|
|
After=dev-apex_0.device
|
|
|
|
[Container]
|
|
Image=ghcr.io/blakeblackshear/frigate:0.12.1
|
|
PodmanArgs=--uidmap 0:209:1
|
|
PodmanArgs=--gidmap 0:209:1
|
|
PodmanArgs=--uidmap 1:6000001:65536
|
|
PodmanArgs=--gidmap 1:6000001:65536
|
|
PodmanArgs=--shm-size 256m
|
|
Volume=/var/lib/frigate/media:/media/frigate:rw,z
|
|
Volume=/var/lib/frigate/tmp:/tmp:rw,z
|
|
Volume=/var/lib/frigate/config:/config:rw,z
|
|
AddDevice=/dev/apex_0
|
|
Network=host
|
|
|
|
[Service]
|
|
PrivateTmp=yes
|
|
ProtectSystem=full
|
|
TemporaryFileSystem=/etc/containers/networks
|
|
ReadWritePaths=/etc/containers/networks
|
|
UMask=0077
|
|
Restart=always
|
|
|
|
[Install]
|
|
WantedBy=multi-user.target
|